Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/99d742ab5f87f5740ebab6a335dc38cc84b21c01.roa
File: 99d742ab5f87f5740ebab6a335dc38cc84b21c01.roa (raw, json)
Hash identifier: bYjhF7aVPEiqKTaBDePHd2gm74DXbH5RKycG/cEsTYo=
Subject key identifier: D9:AC:33:0A:6A:D0:E7:DA:1B:26:92:18:E1:49:D1:D4:E6:60:E5:93
Certificate issuer: /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial: 152825
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/99d742ab5f87f5740ebab6a335dc38cc84b21c01.roa
Signing time: Thu 09 Nov 2023 11:25:47 +0000
ROA not before: Thu 09 Nov 2023 11:25:47 +0000
ROA not after: Sun 09 Nov 2025 11:25:47 +0000
asID: 834
IP address blocks: 200.26.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386533 (0x152825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
Validity
Not Before: Nov 9 11:25:47 2023 GMT
Not After : Nov 9 11:25:47 2025 GMT
Subject: CN=99d742ab5f87f5740ebab6a335dc38cc84b21c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:65:45:25:52:df:5f:17:f9:bd:e6:3a:9c:
63:6d:25:ee:e4:6a:0a:cc:f8:f3:6a:56:5b:27:65:
05:93:cb:7d:48:f5:b3:1e:b5:bc:22:67:30:73:8a:
3c:09:a3:6f:35:4c:0d:ac:a1:89:db:ef:26:ba:15:
19:19:72:c9:89:7b:01:84:0c:3d:a6:01:64:37:39:
d2:cf:1b:ca:6f:95:6f:e0:ac:cf:b7:5d:9f:39:5f:
6f:d5:f9:83:82:56:07:40:c9:9e:f6:33:da:82:c2:
48:4d:3c:ca:0b:f2:31:7b:e8:7a:4c:d8:0b:92:60:
c1:26:e9:06:6e:ad:b1:8b:b8:97:ce:92:8b:8b:e0:
63:c4:76:dc:69:4d:eb:61:dc:b2:f5:7f:c6:16:c1:
21:3b:eb:bd:6f:e1:58:85:51:86:71:b5:5c:56:b5:
64:a6:5d:ab:1a:1c:ea:60:b7:d2:2f:38:18:6f:4f:
1f:2b:9f:6b:ed:12:47:f8:69:6a:97:98:54:57:da:
d5:e6:6b:65:f5:8d:05:5d:02:44:98:49:39:3b:44:
d5:69:98:12:34:50:c4:39:3c:c5:f2:bf:11:6f:94:
03:15:07:7a:20:8f:ac:45:7e:43:79:7d:55:c9:49:
98:bf:3b:99:77:5e:00:51:9f:d2:64:28:2a:d8:51:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AC:33:0A:6A:D0:E7:DA:1B:26:92:18:E1:49:D1:D4:E6:60:E5:93
X509v3 Authority Key Identifier:
keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/99d742ab5f87f5740ebab6a335dc38cc84b21c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.185.0/24
Signature Algorithm: sha256WithRSAEncryption
25:fb:bf:c8:1d:9d:d0:23:8c:9d:a3:6a:ee:ee:b1:15:0d:54:
d4:b7:b0:fa:84:14:bf:8e:80:e5:db:85:b9:16:3f:0b:6d:e8:
5c:ba:0d:12:49:0e:16:ec:f6:e9:7e:36:19:07:5a:13:17:26:
3b:ed:93:02:6c:8e:75:c8:6b:e6:a4:b4:72:3f:a7:5a:2d:7d:
f8:f7:b1:e5:f4:66:cc:76:27:41:ba:0d:ec:06:b3:02:c7:27:
08:c2:67:be:48:17:3a:c4:82:27:bf:33:09:c3:40:e5:b2:03:
e9:b6:4a:7b:24:9a:9d:29:c7:f1:da:75:9e:94:7e:2b:51:48:
1d:82:71:6c:ae:db:4e:00:5b:0c:7d:7c:2f:c8:1f:e5:23:ca:
e8:36:7d:d1:8a:0a:aa:eb:84:76:16:60:3e:7f:ef:42:8c:03:
f1:da:3a:a3:66:9b:63:b1:05:63:28:59:25:04:54:ee:14:00:
43:13:71:71:71:ea:fc:99:38:c4:d9:68:a9:57:92:fd:05:0e:
e3:6c:31:f3:fd:50:c4:3b:00:84:0c:32:a5:56:11:5a:3c:40:
13:34:56:38:e1:78:0e:fa:c2:ec:34:b1:b6:ba:e6:09:d5:9a:
c4:27:71:96:b6:26:45:d8:90:11:4d:cb:8a:bd:02:0a:0a:25:
f5:ad:63:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFSglMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0
MDdjNzI1Mzc1MTlmMTE1NTNjN2VlOWViODNiYWEwNDIzMzQzODAwHhcNMjMxMTA5
MTEyNTQ3WhcNMjUxMTA5MTEyNTQ3WjAzMTEwLwYDVQQDEyg5OWQ3NDJhYjVmODdm
NTc0MGViYWI2YTMzNWRjMzhjYzg0YjIxYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1YtlRSVS318X+b3mOpxjbSXu5GoKzPjzalZbJ2UFk8t9SPWz
HrW8Imcwc4o8CaNvNUwNrKGJ2+8muhUZGXLJiXsBhAw9pgFkNznSzxvKb5Vv4KzP
t12fOV9v1fmDglYHQMme9jPagsJITTzKC/Ixe+h6TNgLkmDBJukGbq2xi7iXzpKL
i+BjxHbcaU3rYdyy9X/GFsEhO+u9b+FYhVGGcbVcVrVkpl2rGhzqYLfSLzgYb08f
K59r7RJH+Glql5hUV9rV5mtl9Y0FXQJEmEk5O0TVaZgSNFDEOTzF8r8Rb5QDFQd6
II+sRX5DeX1VyUmYvzuZd14AUZ/SZCgq2FEImwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNmsMwpq0OfaGyaSGOFJ0dTmYOWTMB8GA1UdIwQYMBaAFES9j+Pv+NwHJZzf
vifQjIvl5UfbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDQwN2M3
MjUzNzUxOWYxMTU1M2M3ZWU5ZWI4M2JhYTA0MjMzNDM4MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjcxMjMwY2UtYTk1MC00YTBiLWI4Y2QtMGY0Y2Q4
ZWIzMjE5Lzk5ZDc0MmFiNWY4N2Y1NzQwZWJhYjZhMzM1ZGMzOGNjODRiMjFjMDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNzEyMzBjZS1hOTUwLTRhMGItYjhjZC0wZjRj
ZDhlYjMyMTkvZDQwN2M3MjUzNzUxOWYxMTU1M2M3ZWU5ZWI4M2JhYTA0MjMzNDM4
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgauTANBgkqhkiG9w0BAQsFAAOCAQEAJfu/yB2d0COMnaNq
7u6xFQ1U1Lew+oQUv46A5duFuRY/C23oXLoNEkkOFuz26X42GQdaExcmO+2TAmyO
dchr5qS0cj+nWi19+Pex5fRmzHYnQboN7AazAscnCMJnvkgXOsSCJ78zCcNA5bID
6bZKeySanSnH8dp1npR+K1FIHYJxbK7bTgBbDH18L8gf5SPK6DZ90YoKquuEdhZg
Pn/vQowD8do6o2abY7EFYyhZJQRU7hQAQxNxcXHq/Jk4xNloqVeS/QUO42wx8/1Q
xDsAhAwypVYRWjxAEzRWOOF4DvrC7DSxtrrmCdWaxCdxlrYmRdiQEU3Lir0CCgol
9a1jzQ==
-----END CERTIFICATE-----
Generated at Thu Nov 9 16:57:07 2023 by rpki-client on console-ams.rpki-client.org